Lucene search
GoogleOSV:GHSA-HGGX-3H72-49WWHistoryJul 24, 2018 - 8:03 p.m.
Pillow Buffer overflow in ImagingLibTiffDecode
2018-07-2420:03:51
Google
osv.dev
6
0.004 Low
EPSS
Percentile
75.0%
Buffer overflow in the ImagingLibTiffDecode function in libImaging/TiffDecode.c in Pillow before 3.1.1 allows remote attackers to overwrite memory via a crafted TIFF file.
References
www.debian.org/security/2016/dsa-3499
github.com/advisories/GHSA-hggx-3h72-49ww
github.com/python-pillow/Pillow
github.com/python-pillow/Pillow/blob/c3cb690fed5d4bf0c45576759de55d054916c165/CHANGES.rst
github.com/python-pillow/Pillow/commit/6dcbf5bd96b717c58d7b642949da8d323099928e
nvd.nist.gov/vuln/detail/CVE-2016-0740
security.gentoo.org/glsa/201612-52
Related
debiancve
debiancve
CVE-2016-0740
2016-04-13 16:59:01
cve
cve
CVE-2016-0740
2016-04-13 16:59:01
ubuntucve
ubuntucve
CVE-2016-0740
2016-02-04 00:00:00
github
github
Pillow Buffer overflow in ImagingLibTiffDecode
2018-07-24 20:03:51
nessus
nessus
FreeBSD : py-pillow -- Buffer overflow in TIFF decoding code (53252879-cf11-11e5-805c-5453ed2e2b49)
2016-02-10 00:00:00
Fedora 23 : python-pillow-3.0.0-2.fc23 (2016-4b06195979)
2016-03-04 00:00:00
Fedora 22 : python-pillow-2.8.2-4.fc22 (2016-4d00dca15a)
2016-03-04 00:00:00
prion
prion
Buffer overflow
2016-04-13 16:59:00
cvelist
cvelist
CVE-2016-0740
2016-04-13 16:00:00
nvd
nvd
CVE-2016-0740
2016-04-13 16:59:01
freebsd
freebsd
py-pillow -- Buffer overflow in TIFF decoding code
2016-02-04 00:00:00
osv
osv
PYSEC-2016-5
2016-04-13 16:59:00
openvas
openvas
Fedora Update for python-pillow FEDORA-2016-4 (FC-22)
2016-02-21 00:00:00
Fedora Update for python-pillow FEDORA-2016-4 (FC-23)
2016-02-10 00:00:00
Mageia: Security Advisory (MGASA-2016-0066)
2016-02-18 00:00:00
mageia
mageia
Updated python-pillow packages fix security vulnerability
2016-02-17 22:06:01
fedora
fedora
[SECURITY] Fedora 22 Update: python-pillow-2.8.2-4.fc22
2016-02-21 02:28:07
[SECURITY] Fedora 23 Update: python-pillow-3.0.0-2.fc23
2016-02-09 20:55:54
debian
debian
[SECURITY] [DSA 3499-1] pillow security update
2016-02-28 22:14:45
ubuntu
ubuntu
Pillow regresssion
2016-09-30 00:00:00
Pillow vulnerabilities
2016-09-27 00:00:00
gentoo
gentoo
Pillow: Multiple vulnerabilities
2016-12-31 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2021-1957
2021-07-02 18:03:40